Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604

Org.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api

Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens

Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass

Keycloak: keycloak: user enumeration via differential error messages

Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation

Keycloak: keycloak: information disclosure via authorization bypass in admin api

Org.keycloak/keycloak-services: webauthn attestation statement verification bypass

Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2

Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter

Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint